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CLAIMS 

1. A communication system comprising: 
a user equipment; 

an access network to which said user equipment is 
attachable; and 

an access controller connected to said access network and 
a domain , 

said access controller arranged to receive a query from 
said user equipment for a service provided by said domain or a 
service accessible via said domain, to determine if said user 
equipment is authorized and, if so, to permit said user 
equipment to obtain said service from or via said domain. 

2. A system as claimed in claim 1, wherein said access 
network comprises one of: 

an IP based network independent of access method; 
a WLAN; 

a DSL network; 

an Ethernet; 

a GPRS network; 

a 3G network; and 

a Bluetooth network. 

3. A system as claimed in claim 1, wherein said domain is a 
mobile operator operated domain. 

4. A system as claimed in claim 1, wherein said query 
comprises a DNS query. 
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5. A system as claimed in claim 1, comprising an 
authorization server function wherein said access controller is 
arranged to authorize said user equipment by communication with 
said authorization server function. 



6. A system as claimed in claim 5, wherein said authorization 
server function comprises information defining a profile for 
said user equipment. 



7. A system as claimed in claim 5, wherein said authorization 
server function is arranged to provide attributes to said 
access controller, said access controller arranged to determine 
session parameters for said user equipment based on said 
attributes . 



8. A system as claimed in claim 1, wherein said access 
controller is arranged to provide an authorization function if 
said query received from said user equipment identifies said 
access controller . 



9. A system as claimed in claim 1, wherein said access 
controller is arranged to provide an authorization function if 
said query received from said user identifies said access 
controller as a primary domain name server. 



10. A system as claimed in claim 8, wherein said query 
comprises a DHCP query. 

11. A system as claimed in claim 1, wherein if the access 
controller determines that said user equipment is not 
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authorized, a required service or an IP address of an Internet 
host is obtained via said access network connected to the 
Internet . 



12. A system as claimed in claim 11, wherein if said user 
equipment is not authorized the access controller is arranged 
to query a server of said access network in response to the 
query . 



13. An access controller for use in a communication system, 
comprises : 

a user equipment; 

an access network to which said user equipment is 
attachable, said access controller being connectable to said 
access network; 

and a domain, wherein said access controller is arranged 
to receive a query from said user equipment for a service 
provided by said domain, or a patent practice service 
accessible via said domain, to check if said user equipment is 
authorized and, if so, to permit said user equipment to obtain 
said service from or via said domain. 



14. A controller as claimed in claim 13, wherein said access 
controller is arranged to authorize said user equipment by 
communication with an authorization server function. 

15. A controller as claimed in claim 13, wherein said access 
controller is arranged to provide an authorization function if 
the query received from said user equipment identifies said 
access controller . 
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16. A controller as claimed in claim 13, wherein if said user 
equipment is not authorized, the access controller is arranged 
to query a server of said access network in response to the 
query . 

17. A communication method, comprising: 

receiving a query at an access controller from user 
equipment attached to an access network for a service provided 
by a domain or a service accessible via said domain; 

checking if said user equipment is authorized; and 
if so, permitting said user equipment to obtain said 
service from or via said domain. 

18. A communication system, comprising: 

receiving means for receiving a query at an access 
controller 

from user equipment attached to an access network for a service 
provided by a domain or a service accessible via said domain; 

checking means for checking if said user equipment is 
authorized; and 

if so, permitting means for permitting said user 
equipment to obtain 
said service from or via said domain. 



